qemu vulnerabilities (Ubuntu)
444 vulnerabilities.
qemuUbuntuThe set_pixel_format function in ui/vnc.c in QEMU allows remote attackers to cause a denial of...5.0 MediumqemuUbuntuThe vmware-vga driver (hw/display/vmware_vga.c) in QEMU allows local guest users to write to qemu...7.2 HighqemuUbuntuThe sosendto function in slirp/udp.c in QEMU before 2.1.2 allows local users to cause a denial of...2.1 LowqemuUbuntuThe VGA emulator in QEMU allows local guest users to read host memory by setting the display to a...2.1 LowqemuUbuntuThe VNC websocket frame decoder in QEMU allows remote attackers to cause a denial of service ...8.6 HighqemuUbuntuOff-by-one error in the pci_read function in the ACPI PCI hotplug interface (hw/acpi/pcihp.c) in...4.6 MediumqemuUbuntuvmstate_xhci_event in hw/usb/hcd-xhci.c in QEMU 1.6.0 does not terminate the list with the...6.8 MediumqemuUbuntuUse-after-free vulnerability in hw/pci/pcie.c in QEMU (aka Quick Emulator) allows local guest OS...5.5 MediumqemuUbuntuhw/usb/bus.c in QEMU 1.6.2 allows remote attackers to execute arbitrary code via crafted savevm...6.8 MediumqemuUbuntuOff-by-one error in the cmd_smart function in the smart self test in hw/ide/core.c in QEMU before...7.2 HighqemuUbuntuHeap-based buffer overflow in the virtio_load function in hw/virtio/virtio.c in QEMU before 1.7.2...7.5 HighqemuUbuntuInteger overflow in the virtio_net_handle_mac function in hw/net/virtio-net.c in QEMU 2.0 and...4.9 MediumqemuUbuntuhw/net/vmxnet3.c in QEMU 2.0.0-rc0, 1.7.1, and earlier allows local guest users to cause a denial...4.9 MediumqemuUbuntuQemu before 1.6.2 block diver for the various disk image formats used by Bochs and for the QCOW...6.2 MediumqemuUbuntuThe qcow2_open function in the (block/qcow2.c) in QEMU before 1.7.2 and 2.x before 2.0.0 allows...5.5 MediumqemuUbuntuMultiple buffer overflows in QEMU before 1.7.2 and 2.x before 2.0.0, allow local users to cause a...7.8 HighqemuUbuntuQEMU before 2.0.0 block drivers for CLOOP, QCOW2 version 2 and various other image formats are...8.6 HighqemuUbuntuMultiple integer overflows in the block drivers in QEMU, possibly before 2.0.0, allow local users...7.0 HighqemuUbuntuQEMU, possibly before 2.0.0, allows local users to cause a denial of service (divide-by-zero...5.5 MediumqemuUbuntuArray index error in the virtio_load function in hw/virtio/virtio.c in QEMU before 1.7.2 allows...7.5 HighqemuUbuntuThe virtio_scsi_load_request function in hw/scsi/scsi-bus.c in QEMU before 1.7.2 might allow...7.5 HighqemuUbuntuThe usb_device_post_load function in hw/usb/bus.c in QEMU before 1.7.2 might allow remote...7.5 HighqemuUbuntuBuffer overflow in scoop_gpio_handler_update in QEMU before 1.7.2 might allow remote attackers to...7.5 HighqemuUbuntuMultiple buffer overflows in the tsc210x_load function in hw/input/tsc210x.c in QEMU before 1.7.2...7.5 HighqemuUbuntuMultiple buffer overflows in the ssd0323_load function in hw/display/ssd0323.c in QEMU before 1.7...7.5 HighqemuUbuntuThe ssi_sd_transfer function in hw/sd/ssi-sd.c in QEMU before 1.7.2 allows remote attackers to...7.5 HighqemuUbuntuAn user able to alter the savevm data (either on the disk or over the wire during migration)...7.8 HighqemuUbuntuThe virtqueue_map_sg function in hw/virtio/virtio.c in QEMU before 1.7.2 allows remote attackers...8.8 HighqemuUbuntuBuffer overflow in hw/intc/openpic.c in QEMU before 1.7.2 allows remote attackers to cause a...7.5 HighqemuUbuntuBuffer overflow in the pxa2xx_ssp_load function in hw/arm/pxa2xx.c in QEMU before 1.7.2 allows...7.5 HighqemuUbuntuQemu 1.1.2+dfsg to 2.1+dfsg suffers from a buffer overrun which could potentially result in...7.8 HighqemuUbuntuBuffer overflow in target-arm/machine.c in QEMU before 1.7.2 allows remote attackers to cause a...7.5 HighqemuUbuntuBuffer overflow in hw/ssi/pl022.c in QEMU before 1.7.2 allows remote attackers to cause a denial...7.5 HighqemuUbuntuBuffer overflow in hw/pci/pcie_aer.c in QEMU before 1.7.2 allows remote attackers to cause a...7.5 HighqemuUbuntuBuffer overflow in hw/timer/hpet.c in QEMU before 1.7.2 might allow remote attackers to execute...7.5 HighqemuUbuntuBuffer overflow in hw/ide/ahci.c in QEMU before 1.7.2 allows remote attackers to cause a denial...7.5 HighqemuUbuntuThe virtio_load function in virtio/virtio.c in QEMU 1.x before 1.7.2 allows remote attackers to...7.5 HighqemuUbuntuThe virtio_net_load function in hw/net/virtio-net.c in QEMU 1.5.0 through 1.7.x before 1.7.2...7.5 HighqemuUbuntuBuffer overflow in virtio_net_load function in net/virtio-net.c in QEMU 1.3.0 through 1.7.x...7.5 HighqemuUbuntuInteger signedness error in the virtio_net_load function in hw/net/virtio-net.c in QEMU 1.x...7.5 HighqemuUbuntuThe Floppy Disk Controller (FDC) in QEMU, as used in Xen 4.5.x and earlier and KVM, allows local...7.7 HighqemuUbuntuHeap-based buffer overflow in the PCNET controller in QEMU allows remote attackers to execute...7.5 HighqemuUbuntuInteger overflow in the qcow_open function in block/qcow.c in QEMU before 1.7.2 allows local...4.6 MediumqemuUbuntuInteger overflow in the qcow_open function in block/qcow.c in QEMU before 1.7.2 allows remote...7.5 High